| primadonna-style.com/2018/03 |  216.239.36.21 | 301 Moved Permanently | 236 B |
URL User Request GET HTTP/1.1primadonna-style.com/2018/03 IP216.239.36.21:80
File typeHTML document, ASCII text, with CRLF, LF line terminators Hashee79f371100fc51d269b69786b2cc984 4828288937ef79a148a6526517deb6e50fc50917 9d6ea197a9b4a7f8d7b6a0fb5eb8dd9d771322d1ba5cd20db4259d92b50b5395
GET /2018/03 HTTP/1.1
Host: primadonna-style.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: http://www.primadonna-style.com/2018/03
Date: Sun, 05 May 2024 03:00:58 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 236
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.primadonna-style.com/2018/03 | 142.250.74.179 | | 23 kB |
URL User Request GET www.primadonna-style.com/2018/03 IP142.250.74.179:0
File typeHTML document, ASCII text, with very long lines (2213) Hash56e6ab783a4acbf74a7e4855793f7b03 ecff12e30b9adb5ed6202942f5c36030297d3599 a6218cda58f9a41183cd9565f217b7e24c6718de8d8d729b0c6a8d415b1c07bb
GET /2018/03 HTTP/1.1
Host: www.primadonna-style.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sun, 05 May 2024 03:00:58 GMT
Date: Sun, 05 May 2024 03:00:58 GMT
Cache-Control: private, max-age=0
Last-Modified: Sat, 27 Apr 2024 01:05:54 GMT
ETag: W/"3d05d50820c8b604d3acd2a3103381c6157558fb8f839dd34e0168f514321de4"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 23174
Server: GSE
|
|
| www.primadonna-style.com/js/cookienotice.js | 142.250.74.179 | 200 OK | 2.0 kB |
URL GET HTTP/1.1www.primadonna-style.com/js/cookienotice.js IP142.250.74.179:80
Requested byhttp://www.primadonna-style.com/2018/03
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: www.primadonna-style.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/2018/03
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sun, 05 May 2024 03:00:58 GMT
Expires: Sun, 12 May 2024 03:00:58 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 04 May 2024 05:55:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
|
|
| images.yoins.com/thumb/big/oaupload/yoins/images/2A/F6/0156112d-f10b-4cc8-91d3-69cda4d77f2a.jpeg |  95.101.10.186 | | 0 B |
URL GET images.yoins.com/thumb/big/oaupload/yoins/images/2A/F6/0156112d-f10b-4cc8-91d3-69cda4d77f2a.jpeg IP95.101.10.186:0 ASN#20940 Akamai International B.V.
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerDigiCert Inc Subject*.yoins.com FingerprintB0:FA:1F:85:E7:AB:0A:65:E2:E1:27:89:20:C5:6E:CE:25:08:11:16 ValidityTue, 09 Apr 2024 00:00:00 GMT - Sat, 12 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumb/big/oaupload/yoins/images/2A/F6/0156112d-f10b-4cc8-91d3-69cda4d77f2a.jpeg HTTP/1.1
Host: images.yoins.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://www.newchic.com/
date: Sun, 05 May 2024 03:00:58 GMT
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| images.yoins.com/thumb/big/oaupload/yoins/images/93/62/61dcd91e-9a70-4277-9ec5-7c50a1bf3e24.jpeg | 95.101.10.186 | | 0 B |
URL GET images.yoins.com/thumb/big/oaupload/yoins/images/93/62/61dcd91e-9a70-4277-9ec5-7c50a1bf3e24.jpeg IP95.101.10.186:0 ASN#20940 Akamai International B.V.
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerDigiCert Inc Subject*.yoins.com FingerprintB0:FA:1F:85:E7:AB:0A:65:E2:E1:27:89:20:C5:6E:CE:25:08:11:16 ValidityTue, 09 Apr 2024 00:00:00 GMT - Sat, 12 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumb/big/oaupload/yoins/images/93/62/61dcd91e-9a70-4277-9ec5-7c50a1bf3e24.jpeg HTTP/1.1
Host: images.yoins.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://www.newchic.com/
date: Sun, 05 May 2024 03:00:58 GMT
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css | 142.250.74.41 | 200 OK | 7.8 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css IP142.250.74.41:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com FingerprintC0:1E:A1:13:90:EF:53:21:6B:57:23:D5:7F:12:F9:D1:2B:71:7A:64 ValidityTue, 16 Apr 2024 03:15:50 GMT - Tue, 09 Jul 2024 03:15:49 GMT
File typeASCII text, with very long lines (35959) Hash1e32420a7b6ddbdcb7def8b3141c4d1e a1be54d42ff1f95244c9653539f90318f5bc0580 a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 04:48:54 GMT
expires: Sat, 03 May 2025 04:48:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 02 May 2024 23:55:05 GMT
content-type: text/css
vary: Accept-Encoding
age: 166324
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| images.yoins.com/thumb/big/oaupload/yoins/images/75/83/06979540-7030-42f2-9fb1-5df9eb284867.jpg | 95.101.10.186 | | 0 B |
URL GET images.yoins.com/thumb/big/oaupload/yoins/images/75/83/06979540-7030-42f2-9fb1-5df9eb284867.jpg IP95.101.10.186:0 ASN#20940 Akamai International B.V.
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerDigiCert Inc Subject*.yoins.com FingerprintB0:FA:1F:85:E7:AB:0A:65:E2:E1:27:89:20:C5:6E:CE:25:08:11:16 ValidityTue, 09 Apr 2024 00:00:00 GMT - Sat, 12 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumb/big/oaupload/yoins/images/75/83/06979540-7030-42f2-9fb1-5df9eb284867.jpg HTTP/1.1
Host: images.yoins.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://www.newchic.com/
date: Sun, 05 May 2024 03:00:58 GMT
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| images.yoins.com/thumb/big/oaupload/yoins/images/36/E4/9450e7d7-9e90-49cf-b144-257651ba7fc1.jpg | 95.101.10.186 | | 0 B |
URL GET images.yoins.com/thumb/big/oaupload/yoins/images/36/E4/9450e7d7-9e90-49cf-b144-257651ba7fc1.jpg IP95.101.10.186:0 ASN#20940 Akamai International B.V.
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerDigiCert Inc Subject*.yoins.com FingerprintB0:FA:1F:85:E7:AB:0A:65:E2:E1:27:89:20:C5:6E:CE:25:08:11:16 ValidityTue, 09 Apr 2024 00:00:00 GMT - Sat, 12 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumb/big/oaupload/yoins/images/36/E4/9450e7d7-9e90-49cf-b144-257651ba7fc1.jpg HTTP/1.1
Host: images.yoins.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://www.newchic.com/
date: Sun, 05 May 2024 03:00:58 GMT
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/4290687098-widgets.js | 142.250.74.41 | 200 OK | 51 kB |
URL GET HTTP/2www.blogger.com/static/v1/widgets/4290687098-widgets.js IP142.250.74.41:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com FingerprintC0:1E:A1:13:90:EF:53:21:6B:57:23:D5:7F:12:F9:D1:2B:71:7A:64 ValidityTue, 16 Apr 2024 03:15:50 GMT - Tue, 09 Jul 2024 03:15:49 GMT
File typeJavaScript source, ASCII text, with very long lines (1941) Hash30490c5bf1c9a62c3f7aaf45de530b69 89fdf91f40944a3babf7d9f485cbfbcc32454d50 b7c68fe77654ca4d42928e0a0ea49c642de2887b1ef65e5123105f5359390d49
GET /static/v1/widgets/4290687098-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51402
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:08:26 GMT
expires: Fri, 02 May 2025 02:08:26 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 23:54:53 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 262352
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/l/font?kit=J7afnpV-BGlaFfdAhLEY6w&skey=a1029226f80653a8&v=v15 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/1.1fonts.gstatic.com/l/font?kit=J7afnpV-BGlaFfdAhLEY6w&skey=a1029226f80653a8&v=v15 IP216.58.207.227:80
Requested byhttp://www.primadonna-style.com/2018/03
File typeWeb Open Font Format (Version 2), TrueType, length 33365, version 1.0 Hashe7825678595bbfa0afa8299e4b5a47cc 0a9683b9e4fc072df48650e5e59fa1f6b3ea91a8 8396199fc615933a68cae14031082e756581c9f3c7dc608f9e82d394248d7bbf
GET /l/font?kit=J7afnpV-BGlaFfdAhLEY6w&skey=a1029226f80653a8&v=v15 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.primadonna-style.com
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33365
Content-Disposition: attachment; filename="font.woff2"; filename*=UTF-8''font.woff2
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Date: Sat, 04 May 2024 07:36:38 GMT
Expires: Sat, 04 May 2024 07:36:38 GMT
Cache-Control: private, max-age=86400
Age: 69861
Last-Modified: Wed, 20 Apr 2022 19:17:33 GMT
Content-Type: text/html; charset=utf-8
|
|
| fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2 | 216.58.207.227 | 200 OK | 30 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2 IP216.58.207.227:80
Requested byhttp://www.primadonna-style.com/2018/03
File typeWeb Open Font Format (Version 2), TrueType, length 29868, version 1.0 Hash8b26cc331e323dda95ea6d0dcf4d7542 1f6b0e5440044f6aa75b1f73d2f9c63a2f75bba9 2d5059c07b957f989ee2ed276e1f6d20428f4d3ed2523e7c305bd3e3ebc092ec
GET /s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.primadonna-style.com
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 29868
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 03 May 2024 10:23:11 GMT
Expires: Sat, 03 May 2025 10:23:11 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 19 Apr 2022 19:09:14 GMT
Content-Type: font/woff2
Age: 146268
|
|
| www.blogblog.com/1kt/simple/paging_dot.png | 216.58.207.233 | 200 OK | 99 B |
URL GET HTTP/1.1www.blogblog.com/1kt/simple/paging_dot.png IP216.58.207.233:80
Requested byhttp://www.primadonna-style.com/2018/03
File typePNG image data, 20 x 18, 8-bit gray+alpha, non-interlaced Hashfcb8627989fa00c5341d05abce52eea9 215f7e27bcb50152a6d87444d3038746c87f1d18 1e3869a752d8d7cfad487a6f4e2def12daa851373a9cce97dcc4a96523501dba
GET /1kt/simple/paging_dot.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 99
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 02 May 2024 16:38:35 GMT
Expires: Thu, 09 May 2024 16:38:35 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 02 May 2024 03:55:29 GMT
Content-Type: image/png
Age: 210144
|
|
| fonts.gstatic.com/s/copse/v15/11hPGpDKz1rGb3dkFEk.woff2 | 216.58.207.227 | 200 OK | 27 kB |
URL GET HTTP/1.1fonts.gstatic.com/s/copse/v15/11hPGpDKz1rGb3dkFEk.woff2 IP216.58.207.227:80
Requested byhttp://www.primadonna-style.com/2018/03
File typeWeb Open Font Format (Version 2), TrueType, length 26796, version 1.0 Hash2acdc2b8b9591e944691a2f84858f150 d27d422cbd26044f4cb29822febf1277b2bed380 762184b0d9e5b5e2aca05cafdaab0c93c37df31970ee8489125ef91cb3345b24
GET /s/copse/v15/11hPGpDKz1rGb3dkFEk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.primadonna-style.com
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 26796
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 02 May 2024 07:24:29 GMT
Expires: Fri, 02 May 2025 07:24:29 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 21 Apr 2022 16:25:54 GMT
Content-Type: font/woff2
Age: 243390
|
|
| fonts.gstatic.com/l/font?kit=J7aanpV-BGlaFfdAjAo9_pxqHw&skey=cd2dd6afe6bf0eb2&v=v15 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/1.1fonts.gstatic.com/l/font?kit=J7aanpV-BGlaFfdAjAo9_pxqHw&skey=cd2dd6afe6bf0eb2&v=v15 IP216.58.207.227:80
Requested byhttp://www.primadonna-style.com/2018/03
File typeWeb Open Font Format (Version 2), TrueType, length 32681, version 1.0 Hash84065ee86a38afa0ab1ee10eec6cfdfd b63bf015dce1608db8705cc6c6835f6f90f43c8f a487960c3a7153cb661e9e3e13105980a8c625ac5b62cfdabdd2e8543a5f8a14
GET /l/font?kit=J7aanpV-BGlaFfdAjAo9_pxqHw&skey=cd2dd6afe6bf0eb2&v=v15 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.primadonna-style.com
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 32681
Content-Disposition: attachment; filename="font.woff2"; filename*=UTF-8''font.woff2
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Date: Sat, 04 May 2024 07:36:38 GMT
Expires: Sat, 04 May 2024 07:36:38 GMT
Cache-Control: private, max-age=86400
Age: 69861
Last-Modified: Wed, 20 Apr 2022 19:17:33 GMT
Content-Type: text/html; charset=utf-8
|
|
| 1.bp.blogspot.com/-ms5FfFE3lc8/VGTVylGs37I/AAAAAAAAIVg/RRezZHfhCCQ/s1600/PrimadonnaStyleBlogBanner_%255BBlk-Pnk%255D.png | 142.250.74.161 | 200 OK | 41 kB |
URL GET HTTP/1.11.bp.blogspot.com/-ms5FfFE3lc8/VGTVylGs37I/AAAAAAAAIVg/RRezZHfhCCQ/s1600/PrimadonnaStyleBlogBanner_%255BBlk-Pnk%255D.png IP142.250.74.161:80
Requested byhttp://www.primadonna-style.com/2018/03
File typePNG image data, 1151 x 367, 8-bit/color RGBA, non-interlaced Hash91a97e1b506dca956521d29d825b96ac 78ba4c7fc19ecee83f1feec21e5d5ab3c756c099 3ec8bc0905f2bc80508ab5ab4312226b89e71f89c0114f1dd39c0427392f18f9
GET /-ms5FfFE3lc8/VGTVylGs37I/AAAAAAAAIVg/RRezZHfhCCQ/s1600/PrimadonnaStyleBlogBanner_%255BBlk-Pnk%255D.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v2159"
Expires: Mon, 06 May 2024 03:00:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="PrimadonnaStyleBlogBanner_[Blk-Pnk].png"
X-Content-Type-Options: nosniff
Date: Sun, 05 May 2024 03:00:59 GMT
Server: fife
Content-Length: 41080
X-XSS-Protection: 0
|
|
| 4.bp.blogspot.com/-VtzgTztb5pc/U7pBgjJxSYI/AAAAAAAAGdk/LgOWLGCaLpE/s1600/LogoSpecial-PS%2BAd.png | 142.250.74.161 | 200 OK | 132 kB |
URL GET HTTP/1.14.bp.blogspot.com/-VtzgTztb5pc/U7pBgjJxSYI/AAAAAAAAGdk/LgOWLGCaLpE/s1600/LogoSpecial-PS%2BAd.png IP142.250.74.161:80
Requested byhttp://www.primadonna-style.com/2018/03
File typePNG image data, 191 x 300, 8-bit/color RGB, non-interlaced Size132 kB (132354 bytes) Hash6aeea0d40caea71d3dda75a0568a98b3 fdda6419079e71fd788e6c4cc1d822df88999320 2be5144cd5315c718d423ac69cb201c004d21fed0f8ba40a8252570cd598d537
GET /-VtzgTztb5pc/U7pBgjJxSYI/AAAAAAAAGdk/LgOWLGCaLpE/s1600/LogoSpecial-PS%2BAd.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v19da"
Expires: Mon, 06 May 2024 03:00:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="LogoSpecial-PS Ad.png"
X-Content-Type-Options: nosniff
Date: Sun, 05 May 2024 03:00:59 GMT
Server: fife
Content-Length: 132354
X-XSS-Protection: 0
|
|
| www.youtube.com/s/player/7d1f7724/player_ias.vflset/en_US/embed.js | 142.250.74.110 | 200 OK | 18 kB |
URL GET HTTP/3www.youtube.com/s/player/7d1f7724/player_ias.vflset/en_US/embed.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (3391) Hash51bf9331b7da93b74aadaed69d8ca9c5 e1a3848b74fdfbf6fe6a4d908666d0476983a95a 599aec0098f8d9eef547c3dcf1e26fb97874d28128faa617e833bd3129dc7aad
GET /s/player/7d1f7724/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/4GocAesm2sU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 18298
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 22:03:46 GMT
expires: Fri, 02 May 2025 22:03:46 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 04:13:58 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 190633
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/7d1f7724/www-player.css | 142.250.74.110 | 200 OK | 48 kB |
URL GET HTTP/3www.youtube.com/s/player/7d1f7724/www-player.css IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash23e4fc48ac24d8114a5713a0d4cf1472 19803fc9a9e999144e7dc61fa97fa5f136b49dde f8e82dfee82ba0db0ddeb04e79a82fa7b2e3a6bcb22736cc1397851adec3607f
GET /s/player/7d1f7724/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/4GocAesm2sU
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 00:40:40 GMT
expires: Sat, 03 May 2025 00:40:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 04:13:58 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 181219
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/7d1f7724/www-embed-player.vflset/www-embed-player.js | 142.250.74.110 | 200 OK | 97 kB |
URL GET HTTP/3www.youtube.com/s/player/7d1f7724/www-embed-player.vflset/www-embed-player.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (829) Hash4fb9f6b90888aabba48871301e71afbf dca16a02e74c6c571c635eb774358dd5924e7a64 3b393dcb2b2da46e964cc4dcfad2bb4a032eca390dcb259194b89a379a8f1d06
GET /s/player/7d1f7724/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/4GocAesm2sU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97319
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 09:53:46 GMT
expires: Fri, 02 May 2025 09:53:46 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 04:13:58 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 234433
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 263407
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/7d1f7724/player_ias.vflset/en_US/base.js | 142.250.74.110 | 200 OK | 812 kB |
URL GET HTTP/3www.youtube.com/s/player/7d1f7724/player_ias.vflset/en_US/base.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (555) Size812 kB (811524 bytes) Hash3e9bcc3a02e10c215e76e8f10776aacd 2d0ea8d5ac893ce05e5d5754b6c8685d8a24a614 8fad8504afcb6cf84a4671ec06aa9bb1bec195180a3bc02274c9446658991dbf
GET /s/player/7d1f7724/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/4GocAesm2sU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 811524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 03:22:24 GMT
expires: Sat, 03 May 2025 03:22:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 04:13:58 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 171515
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 124195
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/img/share_buttons_20_3.png | 142.250.74.41 | 200 OK | 5.1 kB |
URL GET HTTP/3www.blogger.com/img/share_buttons_20_3.png IP142.250.74.41:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com FingerprintC0:1E:A1:13:90:EF:53:21:6B:57:23:D5:7F:12:F9:D1:2B:71:7A:64 ValidityTue, 16 Apr 2024 03:15:50 GMT - Tue, 09 Jul 2024 03:15:49 GMT
File typePNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced Hashad9999106d5f550920b586e8e1704e5a 93fd02c51166402a41f96509cd0ca3fb917877dd 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 13:49:44 GMT
expires: Thu, 09 May 2024 13:49:44 GMT
cache-control: public, max-age=604800
last-modified: Thu, 02 May 2024 03:55:29 GMT
content-type: image/png
age: 220276
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.primadonna-style.com/favicon.ico | 142.250.74.179 | 200 OK | 511 B |
URL GET HTTP/1.1www.primadonna-style.com/favicon.ico IP142.250.74.179:80
Requested byhttp://www.primadonna-style.com/2018/03
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash4fb82678c4ea41e31548120eca120a44 b9eb5845342f0e22a105162fcff604f0c7484c3c f6051ffd2b25fd9a33267c0026e56fb86f7c4ea8adb3c11ef14f8b6b37ff6373
GET /favicon.ico HTTP/1.1
Host: www.primadonna-style.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/2018/03
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Sun, 05 May 2024 03:01:00 GMT
Date: Sun, 05 May 2024 03:01:00 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 27 Apr 2024 01:05:54 GMT
ETag: W/"3d05d50820c8b604d3acd2a3103381c6157558fb8f839dd34e0168f514321de4"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 511
Server: GSE
|
|
| www.newchic.com/ | 95.101.10.201 | | 34 kB |
IP95.101.10.201:0 ASN#20940 Akamai International B.V.
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerDigiCert Inc Subject*.newchic.com FingerprintF9:63:E4:E3:09:12:8B:19:C4:17:43:FB:C3:59:50:A9:BF:F6:42:0E ValidityMon, 08 Apr 2024 00:00:00 GMT - Thu, 10 Apr 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (545) Hash0cad958d0d361bc637892edcc88fa71e dcbe20089ab2c06b0a17acdedf79ea22ad945e07 6a4a32df63e7012547d0d71bc5eb660e5c1d8801f42205eda2b36cc22dd090ef
GET / HTTP/1.1
Host: www.newchic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.primadonna-style.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
server-timing: Request-ID; desc=91641714878059.792624465935410.177.69.561
request-id: 17148780597925420753764
pragma: public
x-akamai-transformed: 9 39699 0 pmb=mTOE,1
content-encoding: gzip
cache-control: max-age=10740
expires: Sun, 05 May 2024 06:00:00 GMT
date: Sun, 05 May 2024 03:01:00 GMT
content-length: 33642
vary: Accept-Encoding
set-cookie: newchic_SID=94160b04c35d1abcb76a313753b73f95; expires=Sun, 12-May-2024 03:00:59 GMT; Max-Age=604800; path=/; domain=.newchic.com
newchic_SID=94160b04c35d1abcb76a313753b73f95; expires=Sun, 12-May-2024 03:00:59 GMT; Max-Age=604800; path=/; domain=.newchic.com; HttpOnly
_bgLang=en-GB; expires=Sun, 12-May-2024 03:00:59 GMT; Max-Age=604800; path=/
currency=NOK; expires=Sun, 12-May-2024 03:00:59 GMT; Max-Age=604800; path=/
default_rule_country=160; expires=Wed, 03-May-2034 03:00:59 GMT; Max-Age=315360000; path=/
ship_is_eu=0; expires=Wed, 03-May-2034 03:00:59 GMT; Max-Age=315360000; path=/
default_rule_warehouse=160%7CCN; expires=Sun, 05-May-2024 15:00:59 GMT; Max-Age=43200; path=/
_conversionType=EU; expires=Sun, 12-May-2024 03:00:59 GMT; Max-Age=604800; path=/
system_microtime=1714878059827; expires=Sun, 05-May-2024 05:00:59 GMT; Max-Age=7200; path=/
generalAbTest=85; expires=Mon, 06-May-2024 03:00:59 GMT; Max-Age=86400; path=/; secure
_abtest=1; expires=Mon, 06-May-2024 03:00:59 GMT; Max-Age=86400; path=/
_freeshipText=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
system_microtime=1714878060393; expires=Sun, 05-May-2024 05:01:00 GMT; Max-Age=7200; path=/
nc-country-code=NO; path=/
_abck=4C031CCB1BEC63E8B7F295E9333B640A~-1~YAAQxQplX6sS4x2PAQAAP5iyRgtD1fTBDy2NmfJidSWmpqN2y4N2Y67x9+qnzxt46Qp2caRgGoidSn+tVwME8VWGGsusi1sltt6BWtkIlDl0A8BpFOz2MqPvY9m7CXmDB+OnhCX5y/SIv4v0r+Ct2G+YNyRBIFwxArWUwR9gRESOe8KbXoMCv2Idjc51we9voJA2N2kH6BGZdK+7DQavqp2vHezt/IqTkR6PmTrqh4v3xx+5TV/C/fagqQ3DrojGrHNct8MT61gAh+X5Tk5gSunzSMBqkE9DYE/oy/dWgPNCi+SfSIa6DFu+MqDCbu+MNiLwVlNdrdMmwIQnmgQ9B4OX+lzV3fWqRRkXs4cF/UdgUP2x/FZL+ZVSFDurheF35mC1gAb4v5k=~-1~-1~-1; Domain=.newchic.com; Path=/; Expires=Mon, 05 May 2025 03:01:00 GMT; Max-Age=31536000; Secure
ak_bmsc=E1E7D47206EA89EADA99EFA4C02FE23E~000000000000000000000000000000~YAAQxQplX6wS4x2PAQAAP5iyRhf4/7U0s2G09JtX1P17pp5y4hf8/W/kzOsajvGxojJxVsuDQQSwnZtZtZDtldUyf45iiWH7alPtMxCFOmGgLXvgchVgYahUwogREBFAK+F7gH6Enpn2dVmSNZFe/1S958SajUJLcwYCEpRyNTbNIRZJ0DlMvpvXKq556ro5zdBUHyqcU0aMCqXAP8/xdP1yz0Ud56KEopDXT+f7TKkcjM6XFYNT9aGXBWklao23I0gO9fsyuuTrSlQIFVCtUpkyyUitP2A1YXGTr279RwEAveir7L2rPTdNaYPlBTAsLnUMEEbqOnSI2p1T1AADLq/usfFq6BA0wolhisXttCoJ5zpGmpWnC2UxgozU8/7f7qpfxG8+qnnLCg==; Domain=.newchic.com; Path=/; Expires=Sun, 05 May 2024 05:00:59 GMT; Max-Age=7199
bm_sz=9D30EC8B350ABD9D17371D2E926DDB46~YAAQxQplX60S4x2PAQAAP5iyRhcV2ojmS1rjVAarPYDoGvUCr9lTzXiDV5U3Nh4s3pSRA55N8I+bXI/+0l0THhhgDnevqOHOe1pr99GcUoDU6eJWqogdjPr8hvSM1tZndeFMR6XrfIeUuyJNiphXY37HR0U75/ZG0+sDiWWhwm2JE3X8ac3U/yXSe1Ikspel+0Z2RqTrhykGtdl1N/1ZRPwbi4A/lrSUvFs9if6638vdo3ROHESdNp6wqq4AW5E41ivoPNLwswjuDgZxn6JJsxVWcECF5Ajlps9H/a1dQ/5GN2KscD3bZLkadCEqfuL+1E4I838OhDUpzZOZOH2HO8+FzzhVHSvrZdredRzVfyxdfKbIultx~4602179~3487033; Domain=.newchic.com; Path=/; Expires=Sun, 05 May 2024 07:00:59 GMT; Max-Age=14399
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/7d1f7724/player_ias.vflset/en_US/remote.js | 142.250.74.110 | 200 OK | 34 kB |
URL GET HTTP/3www.youtube.com/s/player/7d1f7724/player_ias.vflset/en_US/remote.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (543) Hash07b9d7cf2123246d8b51a839423b39c4 4c13595d346c993c490ec6709ada28812821e526 2f605e2f783fd2eebbbec7ade75cedfb6342865713a50a23f1c9a64f8cd23071
GET /s/player/7d1f7724/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/4GocAesm2sU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33676
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 18:30:57 GMT
expires: Fri, 02 May 2025 18:30:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 04:13:58 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 203403
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.newchic.com/ | 95.101.10.201 | | 34 kB |
IP95.101.10.201:0 ASN#20940 Akamai International B.V.
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerDigiCert Inc Subject*.newchic.com FingerprintF9:63:E4:E3:09:12:8B:19:C4:17:43:FB:C3:59:50:A9:BF:F6:42:0E ValidityMon, 08 Apr 2024 00:00:00 GMT - Thu, 10 Apr 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (545) Hash0cad958d0d361bc637892edcc88fa71e dcbe20089ab2c06b0a17acdedf79ea22ad945e07 6a4a32df63e7012547d0d71bc5eb660e5c1d8801f42205eda2b36cc22dd090ef
GET / HTTP/1.1
Host: www.newchic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.primadonna-style.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
server-timing: Request-ID; desc=293031714878060.166842759442210.177.69.561
request-id: 171487806016711377455782
pragma: public
x-akamai-transformed: 9 39699 0 pmb=mTOE,1
content-encoding: gzip
cache-control: max-age=10740
expires: Sun, 05 May 2024 06:00:00 GMT
date: Sun, 05 May 2024 03:01:00 GMT
content-length: 33642
vary: Accept-Encoding
set-cookie: newchic_SID=dd1a48dc97ad1d45d1cb96a8edcbde66; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/; domain=.newchic.com
newchic_SID=dd1a48dc97ad1d45d1cb96a8edcbde66; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/; domain=.newchic.com; HttpOnly
_bgLang=en-GB; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
currency=NOK; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
default_rule_country=160; expires=Wed, 03-May-2034 03:01:00 GMT; Max-Age=315360000; path=/
ship_is_eu=0; expires=Wed, 03-May-2034 03:01:00 GMT; Max-Age=315360000; path=/
default_rule_warehouse=160%7CCN; expires=Sun, 05-May-2024 15:01:00 GMT; Max-Age=43200; path=/
_conversionType=EU; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
system_microtime=1714878060203; expires=Sun, 05-May-2024 05:01:00 GMT; Max-Age=7200; path=/
generalAbTest=21; expires=Mon, 06-May-2024 03:01:00 GMT; Max-Age=86400; path=/; secure
_abtest=1; expires=Mon, 06-May-2024 03:01:00 GMT; Max-Age=86400; path=/
_freeshipText=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
system_microtime=1714878060529; expires=Sun, 05-May-2024 05:01:00 GMT; Max-Age=7200; path=/
nc-country-code=NO; path=/
_abck=9BA412A5D011F3068690CE089CE24865~-1~YAAQxQplX64S4x2PAQAAy5iyRgu3j7AXbNyGdjTA9IA//q8AIZSHmgvY7/AosAEsBNAfh1aquezuns/U5ZplqJ57C/cGrlS9hTxMmqq6DYEhHyVBeKDA42m8vlztbjxaQ0mghffv07RP1avSPTjxBlQ20k4oNX2JZj2AiL3xjVi9m0hRr02/EGv/RDDEeFgnQzWQjVUjX6gRzB+A6dehnLJ26rTkGVmwWglEjkLZgT3epK4YfGDYvVZ5gC8IzPliBotKRLNw3nlH10v3FxBlt8J2bAwDxqH/XnQw3KEhO4dO77FoeDJPhyZdJVlw+rsBW8HyLrWxIfqWZoO4FB6ROKom2Jh9AQJSXFCrTBZX4LH09vQVcRuh0ESQed+0Z9lGYxDyP03gTbY=~-1~-1~-1; Domain=.newchic.com; Path=/; Expires=Mon, 05 May 2025 03:01:00 GMT; Max-Age=31536000; Secure
ak_bmsc=61AF18E42B2E5B97BC9A72E33204AD07~000000000000000000000000000000~YAAQxQplX68S4x2PAQAAy5iyRhdVCapmmLNWBqQrivIDGX8wm8J+3JRcqMkxzdDxjaY46z0+3K+kiM/d5yDNNkhleqfHagrWOjzymVeY7LpnghMvpJyoVosgFlmHBwGH5VVf1qiC6+eM9k5R3NvbJG6m3w86zV0+sX6UoK4c98kpYneMUAlFpGlP8gtTylVbR5H81zxyjpqMxj9MCsjexVxtLfRs5WB/cdOP01EAY3YvZN9JIhun3DBg0H2H1yUof8TI+qJXtcpNyE2SIgkny6K05WxAoIXnaWD/UUz3sEJmcxrMZCmkGJXiEODDP6axFJHqMEASxv8eGWJWOMVrG8s/xk4exPsviWvjlhLseZ6WSCjneN+fKV9UQNXsmv9yoHfCJ8AieEAevA==; Domain=.newchic.com; Path=/; Expires=Sun, 05 May 2024 05:00:59 GMT; Max-Age=7199
bm_sz=BD5460BAB0839F170345564411A9ABDE~YAAQxQplX7AS4x2PAQAAy5iyRhdwg2TEnrbQo0UCrWud6ORDd/JwXNCHjrZZO1vtcvoaVvFq9PkIiKwSNqmeIwL2cDsJkwzB8se7ubO2vCU81ReN7d4zI7cM9LDADrYv87u5BJkWxyrMe75o08BX/WILbExURvmuTzl8XCtlt5s0MayiZsX1nzN3e0QQK52HNv7/ZEG3tZeGc9xww4G1yIoydQC7vcF60hEnnRKXVp+F8mts0qGlPS/aSNI3Q/eR5jJB6DEDisvbdIsFr2WUdzubWDEGKzvcYGCC9CDGM683VqpABuIf7vmG2xhwMKAm3gyyPL2d+2Gc9++E581TT4XLhtwJXB/iYaQiCToYrozDEf7k3vDY~4602179~3487033; Domain=.newchic.com; Path=/; Expires=Sun, 05 May 2024 07:00:59 GMT; Max-Age=14399
X-Firefox-Spdy: h2
|
|
| www.newchic.com/ | 95.101.10.201 | | 34 kB |
IP95.101.10.201:0 ASN#20940 Akamai International B.V.
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerDigiCert Inc Subject*.newchic.com FingerprintF9:63:E4:E3:09:12:8B:19:C4:17:43:FB:C3:59:50:A9:BF:F6:42:0E ValidityMon, 08 Apr 2024 00:00:00 GMT - Thu, 10 Apr 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (545) Hash0cad958d0d361bc637892edcc88fa71e dcbe20089ab2c06b0a17acdedf79ea22ad945e07 6a4a32df63e7012547d0d71bc5eb660e5c1d8801f42205eda2b36cc22dd090ef
GET / HTTP/1.1
Host: www.newchic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.primadonna-style.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
server-timing: Request-ID; desc=293011714878060.172842759442610.177.69.561
request-id: 171487806017312442755792
pragma: public
x-akamai-transformed: 9 39699 0 pmb=mTOE,1
content-encoding: gzip
cache-control: max-age=10720
expires: Sun, 05 May 2024 05:59:40 GMT
date: Sun, 05 May 2024 03:01:00 GMT
content-length: 33642
vary: Accept-Encoding
set-cookie: newchic_SID=fc1978329cbca052f07e0c0fc8e2c5e8; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/; domain=.newchic.com
newchic_SID=fc1978329cbca052f07e0c0fc8e2c5e8; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/; domain=.newchic.com; HttpOnly
_bgLang=en-GB; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
currency=NOK; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
default_rule_country=160; expires=Wed, 03-May-2034 03:01:00 GMT; Max-Age=315360000; path=/
ship_is_eu=0; expires=Wed, 03-May-2034 03:01:00 GMT; Max-Age=315360000; path=/
default_rule_warehouse=160%7CCN; expires=Sun, 05-May-2024 15:01:00 GMT; Max-Age=43200; path=/
_conversionType=EU; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
system_microtime=1714878060204; expires=Sun, 05-May-2024 05:01:00 GMT; Max-Age=7200; path=/
generalAbTest=69; expires=Mon, 06-May-2024 03:01:00 GMT; Max-Age=86400; path=/; secure
_abtest=1; expires=Mon, 06-May-2024 03:01:00 GMT; Max-Age=86400; path=/
_freeshipText=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
system_microtime=1714878060537; expires=Sun, 05-May-2024 05:01:00 GMT; Max-Age=7200; path=/
nc-country-code=NO; path=/
_abck=CA93A0DE6CCC30D03B0FC911638AB13A~-1~YAAQxQplX7ES4x2PAQAA0ZiyRgtU7JVYV3wQg0d5xVf/r7UER3dDUN6VsIIjfyNbxyvZWl7bjVhqifg6LHd1NQnUfSOSIp9fIVsric0GY7c6tGw1kWbIDDSrNaA2nGms6Qz3X6kY587mXgR19BvnE8DiDg1q4xQYyjFbGD8GzX5lfdvKiXHQWTxn5VU/fafWRj/+hwyQKvIksbgWABFGy3BxwzO1IBF/C/SCc95z5VxbJ4CE4D7Btu7D2rJbXC9Zwd7TbFAdNERf59Uh83qY5DkfZfpRJSWin4UHB2K9P9ZOzT5QwE9pX4ntDiO6z+pOAEo0zNkCegFNKraKm8kADfcAB/t9l3QUoVmKjBs/pH86IZn99uVsDilwXKBjdj+thS1U6mHcCuU=~-1~-1~-1; Domain=.newchic.com; Path=/; Expires=Mon, 05 May 2025 03:01:00 GMT; Max-Age=31536000; Secure
ak_bmsc=942C82DE605BF170C5FCE492FB9CE86A~000000000000000000000000000000~YAAQxQplX7IS4x2PAQAA0ZiyRhcnO9SrzMOE0feLgrNJ3ij3yVGjN5ckUMIIorNr8JM3L7LcqhNpJtixRFbjCWxyKRmyfcjFTgRcABmP41Df+CImGT2Tb8IQuJm6z8W4n2uHQgJvUXCrSKjTZ0jf7PB+RKhzGnAurfpOvHfNwOHsNIe1qFv7UaZbGAyVIz212nLG3KVs6nyC9/Q/9UuOz4/ctq+qP7yTPJsCeTVpXv3O8RzzWgxI95UeVym5UFwnJREQx5tu/M9FCyaNVrFL4c7bdKTP/xSat7qHqFnsqcckX67Qs65juiRFzBfxPlG+yjMKuHb83dJzOa4fEdaGCAELCmNB8eqMUu1YWaPJijz35L2iBz9FQ0ZnzyI7Uge8MueasdXvaEfnSQ==; Domain=.newchic.com; Path=/; Expires=Sun, 05 May 2024 05:00:59 GMT; Max-Age=7199
bm_sz=E20A99CA1B13E34DABAD5989ED41E8FC~YAAQxQplX7MS4x2PAQAA0ZiyRhfkt3YbilubNWIvNprjjliT17HmMmECx86qnjWAPGXdnzHXAGJK0WD6D8FsVVJNFj5XFTCNRwXd9jh7AorOibi+LB8yIAT6t8j3BB/T6o/zwbEv42Id9Y0vtzqdCsGyuzqcA3wD00crkxqqgSHkzgW4jzKLXM4/CkLnDr5r/QWE5c9JRX6+hOpfSyxfsYgQKCVWcIEsRFD7Ea5c3IADcrhShc0uXwPAcV0GJY8Zb8SCOusq0bPyYcCQ9lKbLTH0rTbcBR63DfZFVTyJuQs8u6705s/gRCgmkLhOMLLHorwklnh4Q5kcUbW37q9mC81yLSAjtmj/oGMtWMbU5L1X6djiJdUe~4602179~3487033; Domain=.newchic.com; Path=/; Expires=Sun, 05 May 2024 07:00:59 GMT; Max-Age=14399
X-Firefox-Spdy: h2
|
|
| www.newchic.com/ | 95.101.10.201 | | 34 kB |
IP95.101.10.201:0 ASN#20940 Akamai International B.V.
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerDigiCert Inc Subject*.newchic.com FingerprintF9:63:E4:E3:09:12:8B:19:C4:17:43:FB:C3:59:50:A9:BF:F6:42:0E ValidityMon, 08 Apr 2024 00:00:00 GMT - Thu, 10 Apr 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (545) Hash0cad958d0d361bc637892edcc88fa71e dcbe20089ab2c06b0a17acdedf79ea22ad945e07 6a4a32df63e7012547d0d71bc5eb660e5c1d8801f42205eda2b36cc22dd090ef
GET / HTTP/1.1
Host: www.newchic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.primadonna-style.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
server-timing: Request-ID; desc=91701714878060.157624465942610.177.69.561
request-id: 171487806015792791453930
pragma: public
x-akamai-transformed: 9 39699 0 pmb=mTOE,1
content-encoding: gzip
cache-control: max-age=10740
expires: Sun, 05 May 2024 06:00:00 GMT
date: Sun, 05 May 2024 03:01:00 GMT
content-length: 33642
vary: Accept-Encoding
set-cookie: newchic_SID=24ce06b00ed9b0e6a3119d829420b2a1; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/; domain=.newchic.com
newchic_SID=24ce06b00ed9b0e6a3119d829420b2a1; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/; domain=.newchic.com; HttpOnly
_bgLang=en-GB; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
currency=NOK; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
default_rule_country=160; expires=Wed, 03-May-2034 03:01:00 GMT; Max-Age=315360000; path=/
ship_is_eu=0; expires=Wed, 03-May-2034 03:01:00 GMT; Max-Age=315360000; path=/
default_rule_warehouse=160%7CCN; expires=Sun, 05-May-2024 15:01:00 GMT; Max-Age=43200; path=/
_conversionType=EU; expires=Sun, 12-May-2024 03:01:00 GMT; Max-Age=604800; path=/
system_microtime=1714878060189; expires=Sun, 05-May-2024 05:01:00 GMT; Max-Age=7200; path=/
generalAbTest=65; expires=Mon, 06-May-2024 03:01:00 GMT; Max-Age=86400; path=/; secure
_abtest=1; expires=Mon, 06-May-2024 03:01:00 GMT; Max-Age=86400; path=/
_freeshipText=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
system_microtime=1714878060506; expires=Sun, 05-May-2024 05:01:00 GMT; Max-Age=7200; path=/
nc-country-code=NO; path=/
_abck=2DF10D03C1B9FDC027ECAF25B393F4C9~-1~YAAQxQplX7QS4x2PAQAA3piyRgvX/gaCQ2Nh9cNpbQ7rgIqYNVjCHmqro0UK41S2JJsZCaNpbOPwKXByS9XVR/0HEbzVdFMm4s5YJYdbNn9RfxkoIw1bgP5s3n5tJ4LZ1TJU708K92RWzbkFMKuWohH20lAKkMyOqmbWAHJ4+cKVHX0zDt2rByQCgsc0XJhstgvu2/kbrxWpfXtw39Y/ny2BadhRfQ9+XddfXyBTsJoGbPbWjgFapjHpI0bHnKp0Gj9bHoMK0TPMNehIoLU3xxIFFBLWrBm8egLWV9kIZ8idychhHPXwEClTYnI802PHNuFS9FspC7sES/N4Ns4qx6bMlwsJ6pzajZ1OFUV2bcZPpMPkiyJUhNTAfMBXXZnHjZUozwQQedo=~-1~-1~-1; Domain=.newchic.com; Path=/; Expires=Mon, 05 May 2025 03:01:00 GMT; Max-Age=31536000; Secure
ak_bmsc=D285DD1AEA818C0D92005B617F557C25~000000000000000000000000000000~YAAQxQplX7US4x2PAQAA3piyRhfmqcnfXSKOibk7O2UlR5eNmxKEOuZq2/R/tceDY8OiXRE8b6W/bBjeFFjc7YE14fLxs6HeSfoMWIoIAzNpbsmGe5X4PlgQcjjmIGJKb6Og1br4e9KpwrKI0d6LLoVmR8xx0phm1j4Yw+IqWzec5uptY0GGiRkYeImEFdieGpOp+SeiDL/vvd3z8vaaBo3lJwDaBihSVF+lbMze+Vgb/OZ/XkXjwQw11BQZ1MOvLxGQWst0ci49bgugNHlx6I8FU0k90bnm3FTayM+8x/vwE8CTmuOngZQGZpL1Y28zn6FLSe2cKh8yzXHuUu71iSNkCONGhVseLhhXizKjzGAGT0P6wCoTZqHWqEG1dAbYod2z/VQoXO8XDQ==; Domain=.newchic.com; Path=/; Expires=Sun, 05 May 2024 05:00:59 GMT; Max-Age=7199
bm_sz=E63717E4C196AB15BE60DBEE90545969~YAAQxQplX7YS4x2PAQAA3piyRhfy+Q6MzfugyjSOPprKyOoc7fOiz2DSMPXB/wwXYgwoipOcIX2wKnXEmhnkQmMa9xvUDuH57n6pEoG8g0JeyHL0bLVVQWx2PlAHpuopDjikkoM2du/oDbq6l1k36/g9VXXGflCeRpjwhPDnTCRp8LBFVk3QI3t5OkdxY7LmOhstZivc13WYwhUqkrH/SYAvfMfy/Vihifq/4ceVXqZZULRAXSyShJv1FQMWrAOxisvbyJZpsdtLooNvFqDu3aauwFNCMD/FF5UA1VEEkx2+T7vbaUsbNhvgW/oYcG1BrRR5R9oIZ6JIUEe4a7WOGbje/HjUa8lbW4KQ7oHkfPS5Z/TKErI2~4602179~3487033; Domain=.newchic.com; Path=/; Expires=Sun, 05 May 2024 07:00:59 GMT; Max-Age=14399
X-Firefox-Spdy: h2
|
|
| yt3.ggpht.com/ytc/AIdro_kDwfPaL3q-ryOjb2Q2HI19djAKedIijXlVybyxY8YMg-M=s68-c-k-c0x00ffffff-no-rj | 142.250.74.161 | 200 OK | 2.9 kB |
URL GET HTTP/2yt3.ggpht.com/ytc/AIdro_kDwfPaL3q-ryOjb2Q2HI19djAKedIijXlVybyxY8YMg-M=s68-c-k-c0x00ffffff-no-rj IP142.250.74.161:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3 Hash148611131b353aa9804fde2bdce34959 fe4babf6d59515d5e40985e58cfb08f93acf5fce 7c4c6c4f224fef49ef88c8d42105f020d9b67298c31cce3790942dc9ecf38730
GET /ytc/AIdro_kDwfPaL3q-ryOjb2Q2HI19djAKedIijXlVybyxY8YMg-M=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2858
x-xss-protection: 0
date: Sun, 05 May 2024 01:13:37 GMT
expires: Mon, 06 May 2024 01:13:37 GMT
cache-control: public, max-age=86400, no-transform
age: 6443
etag: "v350"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.42 | 200 OK | 0 B |
URL OPTIONS HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.42:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 05 May 2024 03:01:00 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi_webp/4GocAesm2sU/sddefault.webp | 216.58.207.246 | 200 OK | 31 kB |
URL GET HTTP/2i.ytimg.com/vi_webp/4GocAesm2sU/sddefault.webp IP216.58.207.246:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintD2:2C:3D:05:38:12:27:20:C9:64:22:58:3A:99:D5:43:6E:BD:3B:D2 ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeRIFF (little-endian) data, Web/P image Hasha8874756107ce6e30e466c8a00f107dc 798d2c6216ed5cfac2812263df54cae57629ff72 0f3fcc0b0c098f6f2a5e8089064fb8341158efe26640dd49b8cbaedec711f249
GET /vi_webp/4GocAesm2sU/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 30982
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 May 2024 03:01:00 GMT
expires: Sun, 05 May 2024 05:01:00 GMT
cache-control: public, max-age=7200
etag: "1468863768"
content-type: image/webp
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=587824824366892346&zx=7f650130-6d58-48df-937e-e3ee0d539297 | 142.250.74.41 | 200 OK | 21 B |
URL GET HTTP/3www.blogger.com/dyn-css/authorization.css?targetBlogID=587824824366892346&zx=7f650130-6d58-48df-937e-e3ee0d539297 IP142.250.74.41:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com FingerprintC0:1E:A1:13:90:EF:53:21:6B:57:23:D5:7F:12:F9:D1:2B:71:7A:64 ValidityTue, 16 Apr 2024 03:15:50 GMT - Tue, 09 Jul 2024 03:15:49 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=587824824366892346&zx=7f650130-6d58-48df-937e-e3ee0d539297 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 May 2024 03:01:00 GMT
last-modified: Sun, 05 May 2024 03:01:00 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/th/lHWeE89RoY9tzhQhxMmBDz_6pN74vk9MTL8MVYsKvSI.js | 142.250.74.164 | 200 OK | 21 kB |
URL GET HTTP/2www.google.com/js/th/lHWeE89RoY9tzhQhxMmBDz_6pN74vk9MTL8MVYsKvSI.js IP142.250.74.164:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (51729) Hash1af091903d15661fb1de1a6303828828 f7bbce0c1eb0e540d493dd17ff465aba7c0c7ca2 94759e13cf51a18f6dce1421c4c9810f3ffaa4def8be4f4c4cbf0c558b0abd22
GET /js/th/lHWeE89RoY9tzhQhxMmBDz_6pN74vk9MTL8MVYsKvSI.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20562
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:58:54 GMT
expires: Fri, 02 May 2025 01:58:54 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 262927
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.42 | 200 OK | 42 kB |
URL OPTIONS HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.42:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash725e30a8aa186851b5139d0e1369cf29 799ccd4dcc0f83492ea6feb333fda4c2e084c618 6677ce8c8e89728e4f0a1ae660adbe60089d8a6da05c1ee03a1b666b99fccdf4
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 05 May 2024 03:01:01 GMT
server: ESF
cache-control: private
content-length: 42068
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 78.media.tumblr.com/fa48f5ec061380a1916571060788320e/tumblr_pbdrblguxk1tht2xeo1_400.gif | 74.114.154.22 | 301 Moved Permanently | 166 B |
URL GET HTTP/278.media.tumblr.com/fa48f5ec061380a1916571060788320e/tumblr_pbdrblguxk1tht2xeo1_400.gif IP74.114.154.22:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerSectigo Limited Subject*.media.tumblr.com FingerprintBB:22:E2:F1:CE:1D:23:CF:DC:A7:79:3D:81:C9:EB:73:D9:68:69:0A ValidityWed, 03 Jan 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash3ea1c8d079b38532a6e01a96216ba5e2 598d3ff91d3e252f1e13df8cf0348b270ff2da3f 87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /fa48f5ec061380a1916571060788320e/tumblr_pbdrblguxk1tht2xeo1_400.gif HTTP/1.1
Host: 78.media.tumblr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Sun, 05 May 2024 03:01:01 GMT
content-type: text/html
content-length: 166
location: https://64.media.tumblr.com/fa48f5ec061380a1916571060788320e/tumblr_pbdrblguxk1tht2xeo1_400.gif
X-Firefox-Spdy: h2
|
|
| 78.media.tumblr.com/dea6e4b852c298bc2e04573d460bbbdf/tumblr_p35e66vG131x1zbolo1_400.gif | 74.114.154.22 | 301 Moved Permanently | 166 B |
URL GET HTTP/278.media.tumblr.com/dea6e4b852c298bc2e04573d460bbbdf/tumblr_p35e66vG131x1zbolo1_400.gif IP74.114.154.22:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerSectigo Limited Subject*.media.tumblr.com FingerprintBB:22:E2:F1:CE:1D:23:CF:DC:A7:79:3D:81:C9:EB:73:D9:68:69:0A ValidityWed, 03 Jan 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash3ea1c8d079b38532a6e01a96216ba5e2 598d3ff91d3e252f1e13df8cf0348b270ff2da3f 87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /dea6e4b852c298bc2e04573d460bbbdf/tumblr_p35e66vG131x1zbolo1_400.gif HTTP/1.1
Host: 78.media.tumblr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: openresty
date: Sun, 05 May 2024 03:01:01 GMT
content-type: text/html
content-length: 166
location: https://64.media.tumblr.com/dea6e4b852c298bc2e04573d460bbbdf/tumblr_p35e66vG131x1zbolo1_400.gif
X-Firefox-Spdy: h2
|
|
| 64.media.tumblr.com/fa48f5ec061380a1916571060788320e/tumblr_pbdrblguxk1tht2xeo1_400.gif | 192.0.77.3 | 200 OK | 102 kB |
URL GET HTTP/264.media.tumblr.com/fa48f5ec061380a1916571060788320e/tumblr_pbdrblguxk1tht2xeo1_400.gif IP192.0.77.3:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerSectigo Limited Subject*.media.tumblr.com FingerprintBB:22:E2:F1:CE:1D:23:CF:DC:A7:79:3D:81:C9:EB:73:D9:68:69:0A ValidityWed, 03 Jan 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File typeGIF image data, version 89a, 300 x 600 Size102 kB (102330 bytes) Hasha7156fe440f7be1ee5fdb9c1823b701c 315553a30e1ca9bc1acd6ab4cb7d895ea9eb63cb bbb681061a8cd1f34bf1e9edfbdc9a9ba0d72cd3693a6d5bf498fc3cc1d3990c
GET /fa48f5ec061380a1916571060788320e/tumblr_pbdrblguxk1tht2xeo1_400.gif HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.primadonna-style.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:01:01 GMT
content-type: image/gif
content-length: 102330
cache-control: max-age=315360000
content-disposition: inline; filename="tumblr_pbdrblguxk1tht2xeo1_400.gif"
etag: "a7156fe440f7be1ee5fdb9c1823b701c-1523937600-98b6076"
last-modified: Thu, 05 Jul 2018 06:28:34 GMT
timing-allow-origin: *
x-nc: HIT arn 7
accept-ranges: bytes
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=HIT;dur=1.0
X-Firefox-Spdy: h2
|
|
| 64.media.tumblr.com/dea6e4b852c298bc2e04573d460bbbdf/tumblr_p35e66vG131x1zbolo1_400.gif | 192.0.77.3 | 200 OK | 136 kB |
URL GET HTTP/264.media.tumblr.com/dea6e4b852c298bc2e04573d460bbbdf/tumblr_p35e66vG131x1zbolo1_400.gif IP192.0.77.3:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerSectigo Limited Subject*.media.tumblr.com FingerprintBB:22:E2:F1:CE:1D:23:CF:DC:A7:79:3D:81:C9:EB:73:D9:68:69:0A ValidityWed, 03 Jan 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File typeGIF image data, version 89a, 300 x 600 Size136 kB (136124 bytes) Hash4deee688eac87bc25da120796712a2e0 20993e7355c6e2dae212717df79aade30e382733 0e7bcbe6a1c1a0aa8ab6eef264c14a275e6cc1dffef6edc6e2b471b668d63e95
GET /dea6e4b852c298bc2e04573d460bbbdf/tumblr_p35e66vG131x1zbolo1_400.gif HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.primadonna-style.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 03:01:01 GMT
content-type: image/gif
content-length: 136124
cache-control: max-age=315360000
content-disposition: inline; filename="tumblr_p35e66vG131x1zbolo1_400.gif"
etag: "4deee688eac87bc25da120796712a2e0-1523937600-98b6076"
last-modified: Tue, 17 Apr 2018 04:00:00 GMT
timing-allow-origin: *
x-nc: MISS arn 3
accept-ranges: bytes
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=MISS;dur=26.0
X-Firefox-Spdy: h2
|
|
| www.youtube.com/generate_204?PHKK5A | 142.250.74.110 | 204 No Content | 0 B |
URL GET HTTP/3www.youtube.com/generate_204?PHKK5A IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?PHKK5A HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/4GocAesm2sU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sun, 05 May 2024 03:01:01 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lh6.googleusercontent.com/eGxf_GXl1SFRvoY4Kjy9CDcP8Mr3Xx0GT6rR8AykNU363JqNLpCb2gpCUG3PVcsijzS6kB67M4S8pUd3t4XujTCdNHmmHM1VZ3opqKuryVm53Wl6ehltoICYmnyLhjdS6FVZdsXx | 142.250.74.97 | 200 OK | 30 kB |
URL GET HTTP/2lh6.googleusercontent.com/eGxf_GXl1SFRvoY4Kjy9CDcP8Mr3Xx0GT6rR8AykNU363JqNLpCb2gpCUG3PVcsijzS6kB67M4S8pUd3t4XujTCdNHmmHM1VZ3opqKuryVm53Wl6ehltoICYmnyLhjdS6FVZdsXx IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 85", baseline, precision 8, 640x221, components 3 Hashb8910d4d437945f9dad8c68039cef278 522823073edfc2f69524f1fdc0040a8a4d481428 0f2cd413608a77486564f679d9e581861ccccab7897eb0c12814c2edb69af106
GET /eGxf_GXl1SFRvoY4Kjy9CDcP8Mr3Xx0GT6rR8AykNU363JqNLpCb2gpCUG3PVcsijzS6kB67M4S8pUd3t4XujTCdNHmmHM1VZ3opqKuryVm53Wl6ehltoICYmnyLhjdS6FVZdsXx HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="size0.jpg"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 30209
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh3.googleusercontent.com/2nc_WmnSI_JwsKvyPduqoYgWREPOx1BD1W5TXNkhn6nlkOUj61HynXyz7hlANYtBRIrKRjIEMsITYZKsT9F9Trhj24Snif0woPYy8EkKDAXCud0zCVeq18Zu6boEkY1CBomVruVR | 142.250.74.97 | 200 OK | 1.1 MB |
URL GET HTTP/2lh3.googleusercontent.com/2nc_WmnSI_JwsKvyPduqoYgWREPOx1BD1W5TXNkhn6nlkOUj61HynXyz7hlANYtBRIrKRjIEMsITYZKsT9F9Trhj24Snif0woPYy8EkKDAXCud0zCVeq18Zu6boEkY1CBomVruVR IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typePNG image data, 1024 x 768, 8-bit/color RGBA, non-interlaced Size1.1 MB (1076884 bytes) Hash139c5f88a7f2c47cc73d3c3906cf550b 32755af0af5128e7a96884f09b06b4d8ac8fd736 d3c15c5a57a88345ae092d96a942cca594f16d66c90d6b64adc2854e639107b1
GET /2nc_WmnSI_JwsKvyPduqoYgWREPOx1BD1W5TXNkhn6nlkOUj61HynXyz7hlANYtBRIrKRjIEMsITYZKsT9F9Trhj24Snif0woPYy8EkKDAXCud0zCVeq18Zu6boEkY1CBomVruVR HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pasted image 0.png"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 1076884
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJlhh0dk-vTvxnrPX-4B4VNbHt4t2XrEJ2E_gZ_3tSPoGG1YrWtHoCTZH0CsfFs3O5Oxdcd1FKRU-DYXUgl-UWmWIfye4O2AU0VTNRF0EgQlcnLA0akpUxO9A5ztdZ2wmjTMwe2bKTPk4/s640/pexels-photo-119959.jpeg | 142.250.74.97 | 200 OK | 74 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJlhh0dk-vTvxnrPX-4B4VNbHt4t2XrEJ2E_gZ_3tSPoGG1YrWtHoCTZH0CsfFs3O5Oxdcd1FKRU-DYXUgl-UWmWIfye4O2AU0VTNRF0EgQlcnLA0akpUxO9A5ztdZ2wmjTMwe2bKTPk4/s640/pexels-photo-119959.jpeg IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x426, components 3 Hash0fa1435006d780d1ed0a7e3162dac046 9d5b3fe521616ce6cde2a01311299ab3cf27fc06 835beb1d0e6cfd9f7de7ef8be675a3eb0eb6be24418415b3d6d473a449cd2a17
GET /img/b/R29vZ2xl/AVvXsEgJlhh0dk-vTvxnrPX-4B4VNbHt4t2XrEJ2E_gZ_3tSPoGG1YrWtHoCTZH0CsfFs3O5Oxdcd1FKRU-DYXUgl-UWmWIfye4O2AU0VTNRF0EgQlcnLA0akpUxO9A5ztdZ2wmjTMwe2bKTPk4/s640/pexels-photo-119959.jpeg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v3092"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pexels-photo-119959.jpeg"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 74411
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lh5.googleusercontent.com/btJAcqzgeQ_dNj6rQP3zfo2bF5x5HfJ9mbbBvgg4EOOpC_evbOCZfgCXHblf94Ba9rZc5iash0IdwMyPm6F4oRDz6Ib-safLJklVMWfamPHigprMfgVq2gvGgW70dPyEd00GAVTJ | 142.250.74.97 | 200 OK | 204 kB |
URL GET HTTP/2lh5.googleusercontent.com/btJAcqzgeQ_dNj6rQP3zfo2bF5x5HfJ9mbbBvgg4EOOpC_evbOCZfgCXHblf94Ba9rZc5iash0IdwMyPm6F4oRDz6Ib-safLJklVMWfamPHigprMfgVq2gvGgW70dPyEd00GAVTJ IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x640, components 3 Size204 kB (203659 bytes) Hashf434effa0f237de16180a5e0ddbfae51 f877022160259aa5e38e4d7393d24e8cb9948ec8 22709fbb7fd34ab8476aa4559db6e15c5f6e90b76bb1f60609480c438330fa97
GET /btJAcqzgeQ_dNj6rQP3zfo2bF5x5HfJ9mbbBvgg4EOOpC_evbOCZfgCXHblf94Ba9rZc5iash0IdwMyPm6F4oRDz6Ib-safLJklVMWfamPHigprMfgVq2gvGgW70dPyEd00GAVTJ HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v2"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="shopping-606993_960_720.jpg"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 203659
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieDvtEy0dSDgasSy8D37EZenIYjwVsYGrt3uxfBVy4j2Szy_mDzR8SNRvq8nW4rpQNCuhSyn9as6NO6He3n-XEPmfs2aQWAg22X3LQjYRGVzW-48buJGTiHTU8YKQVunf3euznLLrbuXg/s1600/PS-WebsiteButtons_PS-Instagram-Button+Small.png | 142.250.74.97 | 200 OK | 9.5 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieDvtEy0dSDgasSy8D37EZenIYjwVsYGrt3uxfBVy4j2Szy_mDzR8SNRvq8nW4rpQNCuhSyn9as6NO6He3n-XEPmfs2aQWAg22X3LQjYRGVzW-48buJGTiHTU8YKQVunf3euznLLrbuXg/s1600/PS-WebsiteButtons_PS-Instagram-Button+Small.png IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash4ca4cc4f7260a8e1efb799f0bf19cf2e 7078cf86d662c451e986f4413f53e99d9bb24b18 9715956a4e828181d4cb28a4cb0b4f995bc2d9d0ac1b2c3cb79e6523664ee8f4
GET /img/b/R29vZ2xl/AVvXsEieDvtEy0dSDgasSy8D37EZenIYjwVsYGrt3uxfBVy4j2Szy_mDzR8SNRvq8nW4rpQNCuhSyn9as6NO6He3n-XEPmfs2aQWAg22X3LQjYRGVzW-48buJGTiHTU8YKQVunf3euznLLrbuXg/s1600/PS-WebsiteButtons_PS-Instagram-Button+Small.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v24a7"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PS-WebsiteButtons_PS-Instagram-Button Small.png"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 9456
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKD_pPPT8ZUOBnFRpbTZmUZmTc8SfnVEBJrffccn0qy3Kl5adYnemrd7BkjJZhnzsRwc5PhvGHpy-2H8-DmBlXoDMBf7bXsVOf5N1ybuvnXHA8Z4eRUIJS3u1WAOaGoHfuJQ4xrJ_w72U/s1600/PS-WebsiteButtons_PS-Facebook-Button+Small.png | 142.250.74.97 | 200 OK | 9.2 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKD_pPPT8ZUOBnFRpbTZmUZmTc8SfnVEBJrffccn0qy3Kl5adYnemrd7BkjJZhnzsRwc5PhvGHpy-2H8-DmBlXoDMBf7bXsVOf5N1ybuvnXHA8Z4eRUIJS3u1WAOaGoHfuJQ4xrJ_w72U/s1600/PS-WebsiteButtons_PS-Facebook-Button+Small.png IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash1e56353ae1f85d9d2eb81cf37b21752e 55f0d7cfc4c48c5a958e7c3eb3e6a28f6c44ef81 3ce6465b132ddaec6e49bedf18d3a6161e4896c0ebd1a1b45736e5ebc2e52dbd
GET /img/b/R29vZ2xl/AVvXsEgKD_pPPT8ZUOBnFRpbTZmUZmTc8SfnVEBJrffccn0qy3Kl5adYnemrd7BkjJZhnzsRwc5PhvGHpy-2H8-DmBlXoDMBf7bXsVOf5N1ybuvnXHA8Z4eRUIJS3u1WAOaGoHfuJQ4xrJ_w72U/s1600/PS-WebsiteButtons_PS-Facebook-Button+Small.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v204b"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PS-WebsiteButtons_PS-Facebook-Button Small.png"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 9243
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.42 | 200 OK | 0 B |
URL OPTIONS HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.42:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 05 May 2024 03:01:01 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-65c6qBUuhOHzsy4knHI4xJSRwGmBqihohYsbpoEr9QWs34DLa4v_kQGlNFpI-E1r62-7R1ycibMQW2sEAL5XOEhgaFGSnN8Fdb4HTewq6W0g18jEQRRyEOa6yZHAP403k7KDMG9U-80/s1600/PS-WebsiteButtons_PS-Bloglovin-Button+Small.png | 142.250.74.97 | 200 OK | 9.4 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-65c6qBUuhOHzsy4knHI4xJSRwGmBqihohYsbpoEr9QWs34DLa4v_kQGlNFpI-E1r62-7R1ycibMQW2sEAL5XOEhgaFGSnN8Fdb4HTewq6W0g18jEQRRyEOa6yZHAP403k7KDMG9U-80/s1600/PS-WebsiteButtons_PS-Bloglovin-Button+Small.png IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash0550c77d46468980c62fd8bc40aed5b7 d86b24e3cda42362b9dc03da2abaa06c3dbcb10d 9bae1a4f7f766ce3330f783fcb556c3802c17fb421e6aaf587630b299c3f6b57
GET /img/b/R29vZ2xl/AVvXsEg-65c6qBUuhOHzsy4knHI4xJSRwGmBqihohYsbpoEr9QWs34DLa4v_kQGlNFpI-E1r62-7R1ycibMQW2sEAL5XOEhgaFGSnN8Fdb4HTewq6W0g18jEQRRyEOa6yZHAP403k7KDMG9U-80/s1600/PS-WebsiteButtons_PS-Bloglovin-Button+Small.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v204f"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PS-WebsiteButtons_PS-Bloglovin-Button Small.png"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 9364
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7CFyz76fE8K_uDkPkKuTrSsiE-I0jxd-FaST3H4UbRU1b9_qhF6EpfGrsxENivwoUIFQcVA_h15kpcz4lZFxIOp7Mv2e-C1t_HCGvkbeVMrfrmdPzVwAxTSK3q0FjH0p8FeNZcpP2n6Y/s1600/PS-WebsiteButtons_PS-Pinterest-Button+Small.png | 142.250.74.97 | 200 OK | 9.4 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7CFyz76fE8K_uDkPkKuTrSsiE-I0jxd-FaST3H4UbRU1b9_qhF6EpfGrsxENivwoUIFQcVA_h15kpcz4lZFxIOp7Mv2e-C1t_HCGvkbeVMrfrmdPzVwAxTSK3q0FjH0p8FeNZcpP2n6Y/s1600/PS-WebsiteButtons_PS-Pinterest-Button+Small.png IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash742480f2ada0faa1b03002105e5b505c 5c87ac1c8ca7b27ac3500d0539aa240abf367cd4 ec55b5c573dc30e135b4ec37dac65ede888e41350a9a7990d2f9d4b1080476af
GET /img/b/R29vZ2xl/AVvXsEi7CFyz76fE8K_uDkPkKuTrSsiE-I0jxd-FaST3H4UbRU1b9_qhF6EpfGrsxENivwoUIFQcVA_h15kpcz4lZFxIOp7Mv2e-C1t_HCGvkbeVMrfrmdPzVwAxTSK3q0FjH0p8FeNZcpP2n6Y/s1600/PS-WebsiteButtons_PS-Pinterest-Button+Small.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v2053"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PS-WebsiteButtons_PS-Pinterest-Button Small.png"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 9359
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.42 | 200 OK | 110 B |
URL OPTIONS HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.42:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash53684f0faf534eabcecf4b480e318198 ed685a6ea246e854f8e90df0d893f28d2b962a38 58346fcbb521876887158f9a970cea0d43b23dc1cc1760a434422f5a92b2b064
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1040
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 05 May 2024 03:01:01 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZkPwLnDg-w-AvpEGYSeZpT-U6hDY3K27SOAiX7xovrwnsDO4L54_XR55LgIZyie4VFfMQIgNOVeVTGC7utAjj-JseQ3SsDeEU14kF9VlLqglN30x25Z7xnm8OU11Ia60wJYJ1QI_riyo/s1600/PS-WebsiteButtons_PS-Polyvore-Button+Small.png | 142.250.74.97 | 200 OK | 10 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZkPwLnDg-w-AvpEGYSeZpT-U6hDY3K27SOAiX7xovrwnsDO4L54_XR55LgIZyie4VFfMQIgNOVeVTGC7utAjj-JseQ3SsDeEU14kF9VlLqglN30x25Z7xnm8OU11Ia60wJYJ1QI_riyo/s1600/PS-WebsiteButtons_PS-Polyvore-Button+Small.png IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hashd6683df3047f28340ff0470ea492236f fe91f223e027c703122fff15da5e5f8bfab150a3 a89d418e6d6abb51af6eac4ca7977e85164eb421a0d615dbf49104deed73c843
GET /img/b/R29vZ2xl/AVvXsEiZkPwLnDg-w-AvpEGYSeZpT-U6hDY3K27SOAiX7xovrwnsDO4L54_XR55LgIZyie4VFfMQIgNOVeVTGC7utAjj-JseQ3SsDeEU14kF9VlLqglN30x25Z7xnm8OU11Ia60wJYJ1QI_riyo/s1600/PS-WebsiteButtons_PS-Polyvore-Button+Small.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v204c"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PS-WebsiteButtons_PS-Polyvore-Button Small.png"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 10389
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnY8xQjuuetNpOxm_QqpghyJWKbl_Em-Eij0dJJHCIhdQTluW-HZwTIurTen3yERKB28AK7gGe2yXCSjibBVI806QZKTrq46N32BljEyqcDem8kxFnNrNtusRPPG3mOZMmtmOJyW3SbVE/s1600/PS-WebsiteButtons_PS-Youtube-Button+Small.png | 142.250.74.97 | 200 OK | 8.5 kB |
URL GET HTTP/2blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnY8xQjuuetNpOxm_QqpghyJWKbl_Em-Eij0dJJHCIhdQTluW-HZwTIurTen3yERKB28AK7gGe2yXCSjibBVI806QZKTrq46N32BljEyqcDem8kxFnNrNtusRPPG3mOZMmtmOJyW3SbVE/s1600/PS-WebsiteButtons_PS-Youtube-Button+Small.png IP142.250.74.97:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash1ce120bd02a0ed341fad3fc1d5920116 883138abaa10c79a586ff13aef3111027af0f5a5 5e97bbef159fa7a53e2263b48206035439a4f1da6e917b72a46cf76a06db77d1
GET /img/b/R29vZ2xl/AVvXsEgnY8xQjuuetNpOxm_QqpghyJWKbl_Em-Eij0dJJHCIhdQTluW-HZwTIurTen3yERKB28AK7gGe2yXCSjibBVI806QZKTrq46N32BljEyqcDem8kxFnNrNtusRPPG3mOZMmtmOJyW3SbVE/s1600/PS-WebsiteButtons_PS-Youtube-Button+Small.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v2050"
expires: Mon, 06 May 2024 03:01:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PS-WebsiteButtons_PS-Youtube-Button Small.png"
x-content-type-options: nosniff
date: Sun, 05 May 2024 03:01:01 GMT
server: fife
content-length: 8490
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css | 142.250.74.41 | 200 OK | 6.5 kB |
URL GET HTTP/3www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css IP142.250.74.41:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com FingerprintC0:1E:A1:13:90:EF:53:21:6B:57:23:D5:7F:12:F9:D1:2B:71:7A:64 ValidityTue, 16 Apr 2024 03:15:50 GMT - Tue, 09 Jul 2024 03:15:49 GMT
File typeASCII text, with very long lines (35822), with no line terminators Hashfb7ea6fe6f6b435448fd0eb8a2db2e12 33cc931a5f17975d0a9d259a9608cfc6f75a1a4f dbcb4b8e7dbaa9d09b7dbee23f9317eba8ae7933be22e798bc054c0c3b16f163
GET /static/v1/v-css/13464135-lightbox_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6525
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:49:25 GMT
expires: Fri, 02 May 2025 01:49:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 23:54:53 GMT
content-type: text/css
vary: Accept-Encoding
age: 263496
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/static/v1/jsbin/1666805145-lbx.js | 142.250.74.41 | 200 OK | 122 kB |
URL GET HTTP/3www.blogger.com/static/v1/jsbin/1666805145-lbx.js IP142.250.74.41:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.blogger.com FingerprintC0:1E:A1:13:90:EF:53:21:6B:57:23:D5:7F:12:F9:D1:2B:71:7A:64 ValidityTue, 16 Apr 2024 03:15:50 GMT - Tue, 09 Jul 2024 03:15:49 GMT
File typeJavaScript source, ASCII text, with very long lines (2359) Size122 kB (121693 bytes) Hashfe78fe0b5f3ab3cd51e2cae82b5f0300 fa91c0bf98c1534a2d42a7cffa82f5e85e177a4f a1dcfc9fd465632aa6f0488ea8e5190ca45014506e47008dc66a1d1c61206a22
GET /static/v1/jsbin/1666805145-lbx.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 121693
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 15:16:35 GMT
expires: Fri, 02 May 2025 15:16:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 17:57:41 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 215066
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 | 142.250.74.110 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1714878063349
Content-Type: application/json
X-Goog-Visitor-Id: CgtqcUVqeUdVOGlvRSjr7NuxBjIOCgJOTxIIEgQSAgsMIGQ%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240430.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1714878059784&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 11230
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/4GocAesm2sU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sun, 05 May 2024 03:01:03 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 | 142.250.74.110 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/4GocAesm2sU CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1714878084767
Content-Type: application/json
X-Goog-Visitor-Id: CgtqcUVqeUdVOGlvRSjr7NuxBjIOCgJOTxIIEgQSAgsMIGQ%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240430.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1714878059784&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 1023
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/4GocAesm2sU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Sun, 05 May 2024 03:01:24 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015655.jpg |  0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015655.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015655.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016353_1.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016353_1.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016353_1.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04014445-1.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04014445-1.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04014445-1.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016020.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016020.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016020.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04007261.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04007261.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04007261.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015178-1.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015178-1.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015178-1.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04007031.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04007031.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04007031.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016129.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016129.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04016129.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.youtube.com/embed/4GocAesm2sU | 142.250.74.110 | 200 OK | 92 kB |
URL GET HTTP/2www.youtube.com/embed/4GocAesm2sU IP142.250.74.110:443
Requested byhttp://www.primadonna-style.com/2018/03 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/4GocAesm2sU HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 05 May 2024 03:00:59 GMT
strict-transport-security: max-age=31536000
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=GGoNKKPn1n0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=jqEjyGU8ioE; Domain=.youtube.com; Expires=Fri, 01-Nov-2024 03:00:59 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIGQ%3D; Domain=.youtube.com; Expires=Fri, 01-Nov-2024 03:00:59 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/8/_/8_1_1.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/8/_/8_1_1.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/8/_/8_1_1.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015573.jpg | 0.0.0.0 | | 0 B |
URL GET www.dressywomen.com/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015573.jpg IP0.0.0.0:0
Requested byhttp://www.primadonna-style.com/2018/03
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/0/4/04015573.jpg HTTP/1.1
Host: www.dressywomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.primadonna-style.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|